Maxpl0It

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 149 Firefox ESR versions prior to 115.34 and 140.9 Thunderbird versions prior to 149 and 140.9 Description: A flaw exists in the JavaScript Engine's JIT component, specifically a JIT miscompilation issue. This can lead to potential security risks. Recommendations: Update Firefox to version 149 or later. Update Firefox ESR to version 115.34 or later, or 140.9 or later. Update Thunderbird to version 149 or later, or 140.9 or later.

A flaw exists in the networking subsystem of the Linux kernel, specifically within the IPv6 RPL (Routing Protocol for Low-Power and Lossy Networks) protocol implementation. The issue occurs due to improper handling of user-supplied data and incorrect calculation of the packet header size in the `ipv6 rpl segdata pos()` function located in the `net/ipv6/rpl.c` module. This can lead to an assertion failure, allowing an unauthenticated remote attacker to cause a kernel crash and a denial of service condition by sending specially crafted IPv6 packets. This protocol is typically disabled by default in most distributions and is primarily used in embedded devices operating in wireless networks with high packet loss.

The issue is related to errors in resource release in the Core component of Oracle VM VirtualBox. It allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox, potentially causing a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. This could significantly impact additional products.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise it. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products.

The issue is an externally controlled format-string vulnerability due to lack of protection on the admin CLI. This vulnerability can lead to code execution and privilege escalation, allowing an attacker to gain greater privileges than those of administrators. An attacker with access to an admin account could exploit this to escape the restricted CLI and execute arbitrary code.

The issue arises from an improperly neutralized element in an OS command due to lack of protection on the admin CLI, leading to code execution and privilege escalation. An attacker with access to an admin account could escape the restricted CLI and execute arbitrary shell instructions.